A newly disclosed MCP Toolbox vulnerability is raising serious concerns across enterprise environments, particularly those relying … Critical MCP Toolbox Flaw Exposes Enterprise Databases via DNS RebindingRead more
cloud security
Tycoon 2FA Attack Silently Breaks Microsoft MFA
A highly sophisticated phishing platform known as the Tycoon 2FA phishing kit is redefining the threat … Tycoon 2FA Attack Silently Breaks Microsoft MFARead more
TamperedChef Malware Hides Stealth Attacks Inside Signed Apps
One of the most aggressive supply chain attacks in recent memory has struck the developer ecosystem. … TamperedChef Malware Hides Stealth Attacks Inside Signed AppsRead more
Megalodon Attack Injects Backdoors Into 5,500+ GitHub Repositories
One of the most aggressive supply chain attacks in recent memory has struck the developer ecosystem. … Megalodon Attack Injects Backdoors Into 5,500+ GitHub RepositoriesRead more
Splunk Patches Critical Flaws Enabling DoS and Data Exposure
Splunk has released urgent security updates addressing multiple high-impact flaws that could allow attackers to trigger … Splunk Patches Critical Flaws Enabling DoS and Data ExposureRead more
“CypherLoc” Scareware Attack Targets Millions With Fake Alerts
A widely used AI development platform has been found vulnerable to a one-click account takeover, exposing … “CypherLoc” Scareware Attack Targets Millions With Fake AlertsRead more
Critical Dify AI Flaws Enable One-Click Account Takeover
A widely used AI development platform has been found vulnerable to a one-click account takeover, exposing … Critical Dify AI Flaws Enable One-Click Account TakeoverRead more
Canvas LMS Hack: How ShinyHunters Breached Cloud Systems
The digital transformation of the education sector has compressed years of cloud migration into a remarkably … Canvas LMS Hack: How ShinyHunters Breached Cloud SystemsRead more
Poisoned IDE Extensions: Lessons from the 2026 GitHub Supply Chain Attack
The modern developer workspace has become the frontline of enterprise cyber warfare. Integrated Development Environments (IDEs), … Poisoned IDE Extensions: Lessons from the 2026 GitHub Supply Chain AttackRead more
Warning: Massive New Shai-Hulud Worm Devours Developer Platform Secrets
On May 15, 2026, the global software supply chain faced a massive escalation as the notorious … Warning: Massive New Shai-Hulud Worm Devours Developer Platform SecretsRead more